authentication stage 1